GHSA-jm96-7wvj-j3r9MediumCVSS 6.5
A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This...
🔗 CVE IDs covered (1)
📋 Description
A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking, leading to a worker process consuming 100% CPU indefinitely and resulting in a denial of service for the entire guardrails-mediated LLM pipeline.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2026-15154
- https://access.redhat.com/security/cve/CVE-2026-15154
- https://bugzilla.redhat.com/show_bug.cgi?id=2498188
- https://access.redhat.com/errata/RHSA-2026:53263
- https://access.redhat.com/errata/RHSA-2026:53261
- https://access.redhat.com/errata/RHSA-2026:53262
- https://github.com/advisories/GHSA-jm96-7wvj-j3r9